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CIOs  such  as  Jim  Fortner 

aren’t  just  aligned  uiih  the  business. 
They’re  completely  immersed  in  it. 

Meet  the  pioneers 

of  IT-business  convergence. 


BY  REPLACING  PHYSICAL  SERVERS 

WITH  VIRTUAL  ONES 


STm>Y:  MH 


Kroll  Factual  Data  of  Loveland,  Cotorado,  is  a  longtime  provider  of 
information  services  to  the  mortgage  industry.  The  firm  wanted  to 
optimize  its  server  inffastnjcture  to  better  meet  spikes  in  demand  and 
reduce  data  center  costs.  Kroll  Factual  Data  virtualized  Hs  data  center 
using  Windows  Server®  2008  and  Hyper-V™  technology,  consolidating 
650  servers  to  22.  It  further  streamlined  its  infrastructure  using 
Microsoft®  System  Ceriter  data  cerrter  solutions  to  nwiitor  and  rnanage 
its  physical  and  virtual  landscape,  and  Microsoft  Visual  Studio® 
development  tools  to  quickly  develop  applkationi 


With  its  new  optimized  infrastructure,  the  company  can  grow  faster; 
scale  quickly  to  meet  customer  needs  and  dramatically  reduce  fT  costs. 
Kroll  Factual  Data  has  cut  annual  hardware  expenditures  by  tens  of 
thousands  of  dollars,  and  energy  costs  by  US.  $442,554  annually. 


To  download  the  case  study, 

snap  this  tag  or  text  VIRTUAL  to  21710* 

Get  the  free  app  for  your  phone  at  http  //gettag  mobi 
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EDITOR'S  NOTE 


CflIfITEmMU 


Welcome  to  Our 
Fresh  New  Look 

WHEN  YOUR  issue  of  Computerworid  landed  on 
your  desk  this  week,  you  probably  noticed  that 
it  lodes  different  —  still  recognizably  Computer¬ 
worid,  but  somehow  fresher  and  more  up  to  date. 


When  our  designers 
and  editors  kicked  off  this 
redesign,  that’s  the  reactioi 
we  were  shooting  for. 

You’ll  find  design  im¬ 
provements  on  every  page, 
starting  with  the  cover. 


cover  story.  If  you’re  a  Shark  Tank  bn 
(and  who  isn’t?),  you’ll  be  happy  to 
see  that  it  has  more  space  and  a  new 
lot*  (see  page  39).  We’ve  selected  new 
typefaces  throi^bout  and  updated  the 


When  you  think  of 
Coinputenvorld,  1  hope 
you  thii*  of  two  things: 
the  print  magazitM  and  its 
associated  Web  site.  We 
use  them  in  different  ways. 
ComputerurorMcom  is  the  heart  of  our 
IT  news  operation.  CompulenvorM  has 
always  had  a  strong  news  identity,  and 


at  no  cost 


BiackBerry 
Enterprise  Server 


BiackBerry 


Phishing  Attacks  Blamed  on  'Avalanche’ 

A  NEW  REPORT  blames  a  single  Eastern  Avalanche  first  popped  up  in  late  aooS, 

European  gang  for  about  two-thirds  not  long  after  Rock  Phisb,  the  previous  tq> 

of  all  phishing  attacks  conducted  in  phishing  threat,  dropped  off  the  scene.  S<^ 

the  s«ond  half  of  2009.  security  experts  beliew  that  Avalarrche  is 


Anew  REPORT  blames  a  single  Eastern 
European  gang  for  about  two-thirds 
of  all  phisUng  attacks  conducted  in 
the  soxHid  half  of  2009. 

The  phishing  group  —  named  Avalanche 
by  security  researchers  because  of  the  large 
quantity  of  “crimeware"  attacks  it  unleashes 
—  was  behirrd  more  than  84,000  of  the  nearly 
ray.ooo  phishing  attacks  tracked  by  the  Anti- 
Phishing  Working  Group,  an  organization 
of  security  companies  and  law  enforcement 
officials  that  analyzes  phishing  activity  and 
publishes  its  finding  in  semianmial  reports. 

Avahmche  used  slkk  automated  tools  to 
crank  out  phishing  attacks  quickly  for  pur¬ 
poses  of  idratity  theft.  The  gang  set  up  fake 
Web  sites  and  then  spatruned  potential  victims 
with  e-mail  messages  designed  to  trick  them 
into  typing  in  their  usernames  and  passwords. 

The  group  targeted  about  40  institutions, 
including  Yahoo  Inc,  Google  Inc.  and  major 
U.S.  and  U.K.  banks,  said  Greg  Aaron,  otk  of 
the  authors  of  the  report. 


Avalanche  first  popped  up  in  late  2008, 
not  long  after  Rock  Phisb,  the  previous  tq> 
phishing  threat,  dropped  off  the  scene.  Smne 
security  experts  believe  that  Avalanche  is 
simply  using  the  next  generation  of  [diishing 
tools  designed  by  Rock  Flush’s  creators. 

By  October  of  last  year.  Avalanche  was 
such  a  big  problem  that  security  companies 
and  corporate  victims  began  sharing  previ¬ 
ously  private  information  about  the  attacks  to 
devek^  ways  of  fighting  back. 

In  November,  several  unnamed  security 
companies  got  together  and  knocked  out 
Avalarrche’s  infrastructure  for  about  a  week, 
Aaron  said-  In  the  months  since  that  take-  _ 
down.  Avalanche  attacks  have  tapered  off, 
be  said. 

Aaron  rxrted  that  be  doesn't  know  how  long 
this  quiet  period  will  last,  however.  “We  don't 
know  if  they’re  going  to  fade  away  or  if  they’re 
going  to  change  what  they’re  doing  somehow 
and  ramp  back  up  again." 

-  Robert  McMillan.  JDG  News  Service 
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The  IBM  System  x3550  M3  Express. 

When  the  downturn  ends,  the  upside  begins. 

With  new  opportunities  ahead,  now  is  the  time  to  invest  in  a  faster,  more  powerful 
server:  the  IBM*  System  x3550  M3  Express*  server,  powered  by  the  Intel*  Xeon* 
processor  5600  series.  By  replacing  your  aging  servers,  the  x3550  M3  can  help  you 
reduce  operating  costs,  increase  efficiency  and  respond  to  customers  more  quickly. 


IBM  System  x3550  M3  Express 

IBM  System  x3650  M3  Express 

$3,299 

or  $64/month  for  36  months’ 

or  $78/month  for  36  months’ 

PN:7944E2U 

PN:7945E2U 

IBM  System  Storage  DS3200  Express 

$6,495 


ibm.com/systems/perfonnance 
1  866-872-3902 

(mention  6N8AH27A)  , 


Wireless  Causes  Big 
Rise  in  IT  Anxiety 

Managing  ever-evolving  technologies  and  increasingly 
demanding  users  could  prove  to  be  a  Herculean  task 
for  many  IT  managers.  ^  Matt  Hamblen 


ROy  WI-FI  TO  SWARTPNONES,  wireless  technology  is 
ubiquitnus  in  businesses  of  all  sizes  —  and  it’s  an  increas¬ 
ing  source  of  frustration  6>r  many  an  IT  executive. 

Brad  Wright,  vice  president  of  global  oommunications 
technology  at  Jacobs  Engineering  Group  Inc.,  said  in  an 
e-mail  that  wireless  technolagy  causes  a  “HUGE'' (his  emphasis) 
amount  of  amdety  for  large  IT  operations.  Pasadena,  Calif. -based 
Jacobs  has  t5,ooo  wireless  users  in  400  locations. 

Supporting  such  large  wireless  setups  is  hard  enough,  Wright 
said.  But  the  need  to  deal  with  constantly  evolving  technologies 
and  ever  more  demanding  users  makes  the  task  doubly  difficult. 

Most  of  the  to  IT  managers  interviewed  for  this  story  said 
their  organizations  are  keeping  up  with  the  task  of  implementing 

concern  about  the  ability  of  their  IT  shops  to  maintain  control 
over  their  wireless  systems  and  keep  than  secure  in  the  foce  of  a 


deluge  of  new  applications  and  smartphones.  And 
they  expect  things  to  get  even  mote  difficult  with 
the  arrival  of  rrext-genaation  technologies  like 
video  over  wireless  and  voice  over  Wi-Fi. 

Some  univetsity  IT  operations  have  moved 
ahead  of  their  corporate  counterparts  when  it 
comes  to  impletnetrting  com|^  wireless  systems, 
observers  say.  At  Liberty  Univetsity  in  LyrKhburg, 
Va.,  IT  managers  use  an  Aruba  Networks  8oz.irn 
wireless  LAN  to  distribute  17  channels  of  IP-based 
television  to  dorms.  That  costs  far  less  than  provid¬ 
ing  TV  service  via  coaxial  cable  or  even  Ethema, 
said  Jimmy  Graham,  managa  of  network  services. 
Such  projects  put  Liberty  ahead  of  the  pack  in 
the  mobility  game,  at  least  for  now,  analysts  said. 

“In  tnrth,  few  companies  truly  understand  the  ramifications  of 
'  the  future  wireless  transformations,”  said  Jack  Gold,  an  analyst  at 
J.Gold  Associates  LLC.  Video  streaming,  real-time  collaboration 
and  cloud-based  applications  accessed  from  rrrobile  devices  “will 
all  have  a  profound  effect  on  corporate  networks,  security  and 
management  of  devices  attd  users,"  he  added. 

Jrdrn  Rinaldi,  system  architect  for  service  management  and 
trtobility  at  ThyssenKrupp  Elevator  AG,  supports  the  rttofale  IT 
needs  of  some  t5,ooo  workers.  He  suggested  that  companies 
need  to  sa  up  dedicated  groups  or  tap  hi^rartking  executives  to 
oversee  their  wireless  efforts. 

“The  challenge  now  is  in  shaping  the  networks,  the  secrrrity 
and  the  software  to  enable  a  common  s«  of  capabilities,"  said 
Ken  Dirlaney,  an  analyst  at  Gartner  Inc.  “Networks  are  becoming 
borderless,  but  their  capabilities  are  trot  homogeneous."  * 


few  companies  truly  understand  the  ramifications 
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The  1&1  server  totally  configurable  to  your  needs: 

DYNAMIC 
CLOUD  SERVER 


A  powerful  virtual  server  environment 
with  full  root  access.  Adjust  the 
processor  core,  RAM,  and/or  hard 
disk  space  to  fit  your  needs.  With 
the  Dynamic  Cloud  Server,  you  can 
change  your  specifications 
at  any  time! 


SPECIAL  OFFER: 

3  MONTHS 


1&1*  Dynamic  Cloud  Server  -  basic  configuration  includes: 

^  1  Virtual  Core  of  a  Quad-Core  AMD  Opteron"* 
2352  Processor 
%/  ICBRAM 
|/  100  CB  disk  space 

Guaranteed  resources  Oust  like  a  dedicated  server!) 

More  server  offers  are  available  online.  Visit  our  website  for  details. 


1-877-GO-1AND1 

www.1and1.com 


NEWS  ANALYSIS 


It  should  be  possible 
for  IQ  to  remain 
independent,  but  there’s  some 
risk  that  [it]  will  get  swept  up  in 
SAP’s  grander  strategies. 


MONASH  RESEARCH 


SAP  Mostly  Mum 
On  Sybase  Plans 

Analysts  speculate  that  SAP  will  continue  upgrading 
and  selling  most  of  Sybase’s  products  -  while  increasing 
license  fees.  By  Chris  Kanaracus 


company  will  one  day  ofier  a  full  suite  of 
ERP  applications  and  business  intelligence 
tools  that  can  run  on  “any  device,  at  any 
place,  at  any  time." 

Analysts  said  that’s  an  indication  that 
SAP  plans  to  quickly  move  to  int^iate 
Sybase's  mobile  techndogies  with  its  own 
oSerings.  SAP  executives  had  touted  the 
mobile  techndogies  of  Sybase  during  a  con- 
feience  call  earlier  this  month  when  they 
announced  the  deal,  some  noted. 

Jeffrey  Hammond,  an  analyst  at  Forrester 
Research  Inc.,  said  he  expects  that  SAP 
will  promptly  take  advantage  cff  Sybase’s 
mol^  expertise.  "(Mobile]  is  one  of  the 
hottest  areas  for  future  growth,"  he  said, 

seeki^  advice  on  mobile  development  has 
"exploded"  over  the  past  couple  of  quarters, 

’The  future  of  the  various  Sybase  database 
products  is  less  clear,  said  veteran  daubase 
analyst  Curt  Monash  of  Monadi  Research. 

He  suggested  that  SAP  will  eventually  de- 
emphasize  its  own  MaxDB  database  for  use 
with  its  ERP  applications  in  favor  of  Sybase’s 
Adaptive  Server  Enterprise.  "That  would  be 
an  incentive  for  further  [SAP]  investment" 
in  Sybase’s  flagship  A5E,  Monash  added. 

Meanwhile,  SAP’s  Business  Objects  unit 
currently  partners  with  vendors  selling 
business  intelligence  products  that  compete 
with  the  Sybase  IQ  colunmar  database, 
he  noted.  “It  should  be  possible  for  IQ  to 
remain  independent,  in  co^opetition  with 
everybody  else,  but  there’s  some  risk  that  (tt] 
will  get  swept  up  in  SAP’s  grander  strate¬ 
gies,"  Monash  s^. 

Ray  Wang,  an  analyst  at  Altimeter  Group, 
said  that  he  expects  SAP  to  retain  most,  if 


SAPEXiCUTIVES  have  said  little  about  theit  plans  for  '  notall,Sybaseproductsbutaddedthatusetsshouldbracethem- 

Sybase  products  once  the  enterprise  softwam  vendor’s  selves  for  potentially  hi^ier  license  fees.  He  noted  that  following 

$5.8  billion  deal  to  buy  the  Dublin,  Calif.,  database  maker  its  purchase  of  Business  Directs  in  2008,  SAP  jacked  up  prices  and 

doses,  leaving  Sybase  users  and  partners  wondering  about  cut  back  on  the  discounts  available  for  Business  Olqe^  products, 
the  fate  of  technology  that  many  of  them  depend  on.  SAP  officials  did  say  that  once  the  deal  closes,  S]d>ase  will 

Customers  were  looking  for  hints  of  Sybase’s  future  during  operate  as  a  separate  business  unit,  much  like  Business  Objects, 

the  Sapphire  user  conference  in  OrlaiKlo  last  week  but  heard  'The  deal  is  expected  to  close  in  July. « 

little  other  than  SAP  co-CEO  Bill  McDermott’s  pkx^  that  the  KlMflCIW  is  a  reporterjiir  the  IDG  News  Service. 
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The  latest  1&1  server  solution  for  high  performance  needs: 

HEXA-CORE 

TECHNOLOGY 


The  ultimate  in  server  technology,  our  powerful  new  hardware 
class  is  the  perfect  solution  for  running  your  resource-intensive 
applications. 


Ben  Huh 


This  savvy  Web 
entrepreneur 

believes  techies  have 
a  sense  of  humor 
all  their  own. 


As  CEO  AND  r0UnimcfiieCheeJburgerNetwak.afmiiy()f4?c(medysitesaiat's 
gwwingby(mmewgeafonesitepervKdt,BaiHuhisafunsterwithaseriousnmsion: 
to  mike  peopkbu^  and  make  nmiey.lno.  Recently  in  Boston  far  the  ROFlCon  Inter¬ 
net  cukureconfmnce  at  MIT.  he  talked  about  hunm  and  online  businasmodds. 

What  do  you  say  to  btltafiitnd  Mtwotfc  adnMftraton  ahe  hiM  to  dMi  alth  tha 


Why  shooMat  COOipaaiM  Mock  yoar  sHasT  We  occasunally  get  e-mails  (ram  people  saying 
the  site  is  blocked  because  of  a  corporate  firewall.  That  doesn’t  happen  often;  it’s  not  that  big 
ofaproUem.  But  it's  been  well  documented  that  taking  breaks  during  the  day  can  increase 
productivity.  We  need  to  educate  mote  companies  to  look  at  the  science  behind  that. 

Continuedonpogeld 
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YOUR 

r  SUPPORT 

TEAM’S 

SILVER  BULLET. 

QUICK  ON 

THE  DRAW 

AND 

QUICK  TO 

SOLVE! 

A  legendary  support  team  is 
already  in  your  office  -  they  just 
need  the  right  tool.  GoToAssist 
connects  your  team  with  your 
customers  like  never  before  with 
simple,  powerful  remote  support. 

GoToAssist" 


Try  It  FREE  for  30  Days 


by  CiTR|X 


THE  GRILL  |  BEN  HUH 


Vou'w  said  that  vou^e  lot  SO  many  pace  views  on  your 


combined  networh  that  you  can’t  possibly  sen  them 
all.  Does  that  mean  youH  need  to  broaden  out  beyond 

onned^  We’re  [wetty  much  focused  on  that  categevy—  I 
call  it  **happme$s  drivers.”  h’$  not  just  fokes,  but  biogs  and 
other  things.  Our  mission  is  to  make  people  happy  for  five 
minutes  a  day,  and  that’s  going  to  continue.  We  innovate 
very  rapidly  —  we  add  one  site  each  week  —  and  the  great 
thing  is  that  we  can  £ail  quickly,  learn  brom  it  and  ZDOve  <XL 
Some  things  I  can't  predict;  we  just  launched  a  site  called 
“If  Shoes  Could  Kill,"  devoted  to  women’s  weird  shoes.  I 
didn’t  like  it  and  though  it  would  foil,  bitf  it’s  really  taken 
off.  It’s  already  hit  a  million  page  views  a  month. 


What  sites  haven’t  done  well  In  the  two-plus  years 
since  you’ve  created  your  networlcT  Around  a  dozen 
closed.  One  tried  to  boil  down  Wikipedia  into  a  Twitter 
fixmat,  make  any  definition  in  140  characters.  A  lot  trf 
pec4)le  enjoyed  it,  but  it  never  went  mass  ^^al.  1  dem’t 
know  why.  Another  was  a  video  captioning  system — 
you  could  add  your  own  captions  to  a  YouIUbe  video. 
But  then  YoulVibe  released  its  own  captioning  feature, 
so  there  wasn’t  any  need  fix  ours. 


UWe  innovate  very  rapidly  - 
we  add  one  site  each  week 
-  and  the  great  thing  is  that 
we  can  fail  quickly,  learn 
from  it  and  move  on. 

Continued  fwm  page  14 


nta»HMllMMtaollMrpral»lMK?Oh,al»olutely 

they  do.  But  it's  like  pi  —  it’s  not  really  on  the  same  scale  as 
other  people.  There’s  a  subaihuial  humor  that  appeals  to 
that  technical  audience.  "I  Can  Has  Cheezbuiger"  isvery 
popular  with  techies.  Maybe  that's  because  there's  a  higher 

Pve  noticed  that  in  my  discussions  with  people.  Maybe 
they  own  cats  because  techies  tend  to  be  introverted. 

Is  your  Mtwolli,  or  any  of  Hit  iMit  M  M,  iniai  mbit? 
How  do  you  translate  some  of  the  mart  visval  joins 

users;  we're  just  getting  our  strategy  together  for  this. 

Until  now,  our  strategy  has  mostly  been  to  ignore  mobile. 
We  have  an  official  applicatioa.  by  a  freelance  developer 
in  Florida,  but  we're  going  to  take  more  ownership  of  this 
and  will  buy  the  app  outright.  We  don't  really  measure 
data  [in  terms  of  who  is  viewing  our  sites  on  which  device 
or  platfonn),  but  we  know  we  have  a  lot  of  iPhone  visitors. 
Of  course,  with  the  iPad  there  are  fewer  restrictions  [on 
visual  humor]  than  with  the  IPhofK  or  BlackBerry. 


just  moved  from  page  views  to  unique  users.  We  don’t 
measure  engagement  —  what  percentage  has  been 
active  in  the  past  30  days.  That’s  a  lot  harder  to  measur 


ymi^  recently  pidriUMd  your  flfib  book,  I  HIS  a  Mot 
l»ld,lstboreaciosioyiribdliocowbohnystbobooht 
and  tban  comas  to  tba  sllas?  Books  are  a  relatively  small 
part  of  our  revenues.  But  it  has  a  network  efiect  —  they 
pass  the  books  along  to  other  people  and  tell  them  about 

people  are  walking  to  the  bookstore  and  buying  the  book. 


yyc  live  in  an  incroasinfly  politkally  comet  world, 
yet  you  have  sites  that  some  mifbt  find  offensive, 
such  as  “Enfrlsh  Funny.”  Arc  you  ororriod  that  this 
kind  of  humor  miibt  bacomc  oatdated  or  Inolavant 
at  senw  point?  Our  data  seems  to  [show]  that  people 
will  share  less  but  will  still  come  to  visit.  People  ate 
very  much  in  pursuit  of  happiness  —  human  beings 
do  that  naturally  —  and  as  long  as  we  can  deliver  on 
that  promise,  we’ll  still  have  an  audience. 
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Xeon 


k  OPINION 

^PERKINS _ 

Certifications  Are  a  Stop 
On  the  Road  to  Licensing 


A  software 
engineering 
license 
would  be 
a  model 
for  other 
areas  of  the 
industry. 


■artPcrMnsis 

managing  partner  at 
Louisville.  Ky.-based 
Leverage  Partners 
Inc.,  which  helps 
organizations  invest 
well  in  IT.  contaa 
him  at  BartPerkins@ 
LeveragePartners.com. 


My  column  “Certifications  Are  No  Longer  Optional”  generated 
emotional  responses  on  both  sides  of  the  issue,  split  roughly 
50-50. 1  agree  that  certs  aren’t  worthwdiile  if  you’re  well  respect¬ 
ed  within  your  company,  close  to  retirement  or  employed  by  a 


company  chat  doesn’t  value  certification.  But  if  you 
might  change  jobs  in  the  next  few  years  (voluntarily 
or  not),  certificatkms  will  strengthen  your  resume. 

And  certs’  relevance  goes  beyond  that.  They  ate 
the  first  step  towaid  licensiiig  IT  professionals. 

Many  disciplines  have  established  licensing  pro¬ 
cedures.  Anyone  working  in  those  fields  who  l«ks 
a  license  is  severely  restricted  in  what  he  can  do. 
For  example,  accountants  can  offer  tax  prepara¬ 
tion  and  bookkeeping  services,  but  only  CPAs  can 
audit  and  certify  a  company’s  books. 

How  real  is  the  prospect  of  IT  licensing?  In 
Britain,  a  Charter^  Information  Technology 
Professional  license  is  awarded  to  IT  professionals 
who  meet  strict  criteria  set  by  the  British  Com¬ 
puter  Society.  In  the  U.S.,  the  National  Council  of 
Examiners  for  Engineering  and  Surveying  offers  a 
licensing  exam  for  computer  engineers,  focus¬ 
ing  on  hardware  architecture,  networks,  system 
software  and  digital  devices. 

The  NCEES  is  working  with  state  professional 
engineering  groups  and  the  IEEE  to  develop  an 
exam  for  software  engineers.  (The  Association  for 
Computing  Machinery  supports  the  concept  of  li¬ 
censing  but  has  withdrawn  from  that  effort.)  While 
the  scope  of  the  exam  is  still  being  determined,  the 
first  version,  with  a  likely  focus  on  specific  process- 
control  functions,  could  be  offered  in  aotj. 

A  software  engineering  license  would  be  a 
model  for  other  areas  of  the  industry,  such  as 
infrastructure,  operating  systems,  business  ap- 

Licensing  would  be  a  major  step  fmward  for  IT 
for  reasons  such  as  these: 


■  It  would  demonstrate  a  level  of  professional¬ 
ism  the  industry  has  sought  for  many  years. 

■  It  would  be  an  indicator  of  specific  skills.  That 
could  help  hiring  managers  with  t«uttfe  triage. 

■  It  would  pave  the  way  for  common  IT  job 
titles  at>d  industrywide  standards  for  job  responsi¬ 
bilities  and  performance  metrics. 

■  It  could  establish  global  competetKy  levek 
for  IT,  a  boon  in  a  time  of  global  outsourcing. 

Once  licensing  is  available,  certain  jobs  might 
require  licensed  IT  professionals.  For  example,  the 
FDA  could  require  that  software-based  medical 
devices  be  coded  and  tested  by  licensed  devel¬ 
opers.  Regulators  could  also  require  that  only 
licensed  developers  work  on  products  that  must 
meet  strict  safety  standards,  such  as  air  traffic 
control  software  and  automotive  systems. 

Not  All  Rosy 

There  is  a  downside.  Licensed  professionals  are 
personally  liable  for  their  work  and  can  be  found 
guilty  of  malpractice.  And  an  emphasis  on  licens¬ 
ing  might  override  concerns  about  a  job  candi¬ 
date’s  cultural  fit  within  an  organization.  But  the 
advantages  far  outweigh  the  challenges. 

IT  licensing  is  the  culmination  of  many  groups’ 
efforts  to  gain  respect  for  the  IT  industry  and 
establish  professional  standards.  Obviously,  licens¬ 
ing  is  no  substitute  for  years  of  experience.  But  it’s 
a  good  first  step  toward  defining  effective  industry 
standards  of  professionalism.  Cff  course,  we  could 
always  go  back  to  the  time-honored  designations 
of  “techies,”  “geeks"  and  “nerds." 

Is  licensing  starting  to  sound  any  better?  • 
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paiis  of  shoes,  ofleis  free  iiext-<iiy  shipping  on  all  purchases  juid  is 
kiKwn  lor  its  generous  365-day  return  policy  and  top-notch  custom¬ 
er  service.  Behind  the  scenes,  IT  is  embedded  in  everything  Zappos 

online  experience  to  coordinating  the  warehouse  robot  system. 

Forget  rr-husiness  alignment.  Vanguard  and  Zappos.com  ate  two 
of  a  small  number  of  companies  where  business  and  IT  ate  virtually 
indistinguishable.  Others  on  an  admittedly  unscientific  short  list 
of  pioneers  in  rr-busit»ess  convergence  are  The  Progressive  Corp., 
Southwest  Airlines  Co.  and  The  Procter  &  Gamble  Co.  What  all  of 
these  companies  have  in  common  is  that  IT  doesn’t  just  support  the 
business;  it  enables  and  continually  transforms  the  business,  often 
creating  new  revenue  and  profit  streams  (see  story,  page  24). 
Moreover,  CIOs  and  everyone  else  in  IT  at  these  companies 

In  fact,  it’s  not  at  all  unttsual  for  employees  to  rotate  through 

several  jobs,  moving  in  and  out  of  IT  and  business  roles.  “Rotation 

gives  you  context,"  says  Buckley. 
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Meet  the  pioneers 
of  extreme  IT-business 
convergence.  At  these 
companies,  it’s 
hard  to  tell  IT  and 
business  apart. 
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Another  notable  attribute:  Customers 
of  these  companies  ate  king,  and  cus¬ 
tomer  service,  both  internal  and  external, 
is  supreme.  At  Procter  &  Gamble,  for 
example,  dedicated  client  service  teams 
from  P&G  s  shared  services  group  (which 
encompasses  IT)  meet  with  business  unit 
presidents  to  discuss  the  terms  of  their 
IT  supplier-customer  relationship.  Not 
coinci^ntally,  this  is  the  same  way  P&G's 
sales  teams  do  business  with  their  ^ant 
retail  customers.  In  fact,  it  was  P&G's  lead 
relationship  manager  on  the  Wal-Mart 
customer  team  who  helped  coach  IT  on 
how  to  make  these  internal  relationships 
work,  notes  lim  Fortner,  P&G's  vice  presi¬ 
dent  of  IT  development  and  operations. 


These  Companies  Seek 
Very  Different  Skills 


One  Bull’s  Eye  one  reason  h 

At  all  five  companies,  IT  and  the  business  billion  dollars." 

are  not  so  ituerested  in  aligning  but  rather  "When  you  g( 

are  fully  engaged  in  convergir^  on  an  "People  who  St 

enterprise  vision  or  goal  that  hovers  above  really  not  a  lot : 

every  department  and  project  plan  and  is 
crystal  clear  to  each  and  every  employee. 

These  IT-sawy  companies  are  very  tar¬ 
geted  in  what  they're  doing,"  says  Jeanne 
Ross,  director  of  MIT's  Center  for  Information  Systems  Research. 
"Even  if  it's  a  very  hi^  company,  it  doesn't  lose  sight  of  how  it's 
going  to  deliver  value  or  make  money.  There's  real  clarity  in  how 
they're  going  to  do  it. ” 

At  Vangirard,  for  example,  that  singular  vision  is  about  creat¬ 
ing  wealth  for  clients,  typically  for  retirement.  “We're  really  not 
all  that  complicated  of  a  firm.  Were  not  trying  to  do  too  different 
things,  so  there's  tKM  that  classic  tension  between  different  busi¬ 
nesses,  and  there  aren't  stovepipe  systems.  That  is  so  not  who  we 
are,"  Heller  says.  “It's  really  all  about  running  the  firm,  and  it's 
about  doing  the  right  thing  for  the  client.  We  all  move  between 
jobs,  so  it's  not  about  your  job;  it's  about  wearing  that  bigger  hat 
—  the  Vanguard  hat." 


At  P&G.  Fortner  says  the  company's  CEO  has  made  his  vision 
perfectly  clear:  Acquire  t  billion  new  consumers.  "What  I'm  focused 
on  is  what  IT  can  do  to  drive  more  product  adoption,"  he  says. 

To  help  drive  faster  adoption  of  ntore  products,  IT  has  devel¬ 
oped  a  virtualized  environment  that  P&G  uses  to  conduct  product 
d^ign  work,  product  placement  research  and  even  consumer 
feedback  studies.  Among  other  things.  IT  has  created  virtual 
reality  models  to  test  design  ideas  for  the  next  breakthrough  in 
products  such  as  diapers  or  cosmetics.  Within  these  cyberworlds, 
P&G  can  rapidly  test  product  performance  and  consumer  re¬ 
sponse  to  various  kinds  of  ingredient  and  packaging  choices. 

Another  big  push  is  to  use  visualization  to  help  executives  run 
their  businesses  in  teal  time.  This  involves  integrating  product,  con- 


government  regulators.  “If  State  Farm 
changes  its  rates  in  (%io.  for  example,  vve 
immediately  stop  givit^  out  State 

a  rating  algorithm  that  reproduces  State 
Farm's  rates,  "  explains  CIO  Ray  Voelker. 
"We  needed  to  create  a  tool  that  lets  our 
Inisiness  people  read  a  state  regulattxy’ 
filing  and  glean  the  key  data  to  determine  a 
rating  algorithm  for  our  omipetitors.  ” 

build  such  a  system  if  it  didn't  thoroughly 
understand  how  ittsurance  pricing  works 
and  how  price  fluctuations  impact  Pro¬ 
gressive.  says  Voelker. 

""lust  having  technical  knowledge  doesn’t 
really  help"  he  says.  "We  really  stress  that 
we  want  pec^le  to  be  amversant  in  techrtol- 
ogy  but  also  understand  the  insurance  bust* 
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Die  product  adoption,’' he  says. 

1  of  more  products,  IT  has  devel- 
it  that  P&G  uses  to  conduct  prod 


on  is  what  IT  can  do  to  drive  I 
To  help  drive  faster  adopts 
oped  a  virtualized  environmi 
design  work,  product  placein 
feedback  studies.  Among  oth 


ilitbin  these  cyberwotWs, 


products  such  as  diapers  or  cosmetn 
P&G  can  rapidly  test  product  perfor 
sponse  to  various  kinds  of  ingredien 
Another  big  push  is  to  use  visualiz 


Heller  says.  “It’s  really  all  about  i 
t  doing  the  right  thing  for  the  clii 
so  it's  not  about  your  job;  it’s  abo 
e  Vanguard  bat" 


I  real  time.  This  invtdves  integrating  product  ( 


sumer  and  sales  data  that  was  once  viewed  in 
various  reports  into  a  single  (Jedaon  cxxdqtit 
wheretheinibrniatk»icanbeviewedgia|dti' 
cally.  Both  of  these  programs  require  hiring 
for  nontraditiona]  IT  skills,  Fortner  says  (see 
story  at  left). 

Another  key  attribute  of  these  conver- 


ptovider  that  oBers  customers  choices. 

Its  overarching  goal  is  to  make  insurance 
easy  to  shop  for,  buy  and  own.  Its  strategy 
involves  using  hi^y  automated  umlerwrit- 


online  Name  Your  Price  tool,  for  example,  allows  customers  to 
choose  the  price  they  wotdd  like  to  pay  for  insurance  and  then 
see  the  coverage  they  can  buy  for  that  price.  After  entering  has 


mce  package  that  includes  limits  and  derhictibles  closest  i 
nam^  price.  Shoppers  can  also  manipulate  an  online  dia 
various  options,  and  the  system  instantly  responds 


petitors  charge  for  the  same  coverage. 

To  enable  this  level  of  data  transparency,  IT  developed  software 
that  allows  Progressive  to  quickly  extract  pricing  data  filed  with 


government  regulators.  “If  State  Farm 
changes  its  rates  in  Ohio,  (or  example,  we 
would  immediately  stop  giving  out  State 


and  how  price  fluctuations  impact  Pro¬ 
gressive,  says  Voelker. 

“Just  having  technical  kruwledge  doesn’t 
really  help,"  he  says.  “We  really  stress  that 
wewantpeopletobeconversantintechnol- 
ogy  but  also  understand  the  insurance  busi¬ 
ness.  Once  you  understand  the  insurance 
business,  you  know  how  impoctam  the  cost 
structure  is  to  the  business.  I  never  forget 
Fm  in  the  insurance  business.  Technology 
is  just  part  of  the  rhythm." 

That’s  why  virtually  all  new  hires  at 
Progressive  take  a  cote  insurance  curricu¬ 
lum  at  the  company’s'lT  Univetsity.  After 
east  a  few  years  out  in  the  business  units  “on 
Its  of  repetition,"  says  Voelker,  who  spent 


language,"  he  says.  In  IT,  “we  have  folks  who 
a  product  works  maybe  even  mote  than  the  | 
Unless  you’re  a  hard-core  infrastructure  guy. 


panics  where  IT  and  the  business  are  fully  converged. 

“It’s  everything  from  sharing  financials  to  sharing  project 
plans  and  sutuses  and  issues,"  says  Southwest  Airlines  CIO 
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)an  Marshall,  'i  don't  think  there  is  anything 
within  the  contest  of  the  technology  oiganlza- 
tion  that  I  wouldn't  feel  comfortable  sharing 
with  my  business  customers," 

This  is  essential  because  virtually  all  of  the 
products  Southwest  has  developed  and  imple¬ 
mented  have  been  enabled  by  technology.  The 
airline's  Early  Bird  check-in  service  is  a  prime 
example.  For  an  extra  $io  each  way,  travel¬ 
ers  can  purchase  this  option  via  the  Web  site, 
which  automatically  checks  them  in  36  hours 
before  their  flight's  scheduled  departure  time, 
securing  them  an  earlier  boarding  position. 
(Pther  passengers  can  check  in  electronically  a 
maximum  of  24  hours  before  flight  time.)  Like 
most  everything  else  at  Southwest,  this  is  all 


IT  Develops  Products, 
New  Revenue  Streams 

0  TO  ZtVMSXOM  for,  ny,  a  pair  ol  rMl  CMis  niidali  In  a  itai 
BV^andTWCaniaaaHoltlwaailixiandakainaaMtlnitDck. 

GO  to  Clafloxom  and  you'll  be  able  to  find  all  of  the  same  informa¬ 
tion  just  as  aUcklv.  That's  because  a  Zappos  unit  called  Powered  by 
Zappos  buill  and  runs  the  Clarks  Web  site, 
launched  a  little  under  two  years  ago.  Powered  by  Zappos  is  a 
revenue-producing  business  and  a  diren  offshoot  of  Zappos.com's  IT  department. 

*lf  you  buy  a  produa  from  Clarks  online,  it’s  all  Zappos  underneath.'  notes  Zappos 
IT  chief  Brent  Crumley. 

At  Southwest  Airlines.  IT  has  similarly  been  lapped  to  create  new  products  and  ser¬ 
vices.  such  as  the  airline's  Early  Bird  online  check-in  service.  For  an  extra  $10,  travel¬ 
ers  can  get  a  preferred  seat  36  hours  before  their  flight's  scheduled  departure  time. 

Ifeanwhile.  at  Progressive,  seamless  IT  makes  it  appear  to  customers  as  if  the 
company  sells  and  services  home  insurance,  yet  the  fact  is  that  Progressive  sells  only 


plans  CIO  Ray  voelker.  'Today,  we’re  imegrating  software  horn  other  (types  of  insur¬ 
ance  companies  to  make  it  look  and  feel  as  though  it's  all  coming  from  Progressive.' 
he  says,  noh'ng  that  the  strategy  produces  incremental  revenue. 


Zappos  expands  its  product  and  sei 


Marshall  emphasizes  that  information  trans¬ 
parency  and  clear  communication  channels  are 
absolutely  critical  because  Southwest’s  "whole 
customer  thread  and  all  of  our  fundamental 
transactions  are  very,  very  tightly  integrated.  If 
you  make  a  change  with  the  airline  schedule, 
it  has  implications  for  how  our  flight  crews  are 
scheduled  to  work,  how  our  airport  operations 
might  be  affected  and  how  we  market  our  flight  schedule 
Web  site.  We  need  to  understand  all  of  the  implications  when  we 
make  business  or  process  change  decisions." 

To  do  this  well  requires  team  players,  which  is  why  Southwest 
hires  IT  professionab  based  on  attitude  first  and  then  on  techni¬ 
cal  and  business  skilb.  What  constitutes  the  right  attitude,  Mar¬ 
shall  says,  b  a  passion  for  customer  service  and  open  communi¬ 
cation.  These  are  absolutely  critical  in  the  airline’s  850-person  IT 
group  "because  it  b  technology  that  is  our  product."  she  says. 

Taking  the  Long  View 

Convergence  pioneers  do  not  develop  and  deploy  IT  as  a  solution 
to  a  particular  problem.  They  design,  build,  integrate  and  operate 
technology  for  the  long  term.  Essentially,  their  technology  strate¬ 
gies  boil  down  to  first  figuring  out  what  is  and  what  isn’t  going 
to  change  about  their  business,  and  then  automating  what  isn't 
going  to  change,  like  flnancial  processes 

The  remaining  business.systems  are  built  in-house  as  part  of 
a  highly  flexible  computing  platform  that  can  adapt  to  market 
demand  for  new  products  and  services. 

This  IT-business  conveigence  is  clearly  anything  but  the  norm, 
according  to  McKinsey  &  Co.’s  2009  survey  on  IT  strategy  and 
spending.  Of  the  444  IT  and  business  executives  who  responded, 
only  16%  said  they  have  put  in  place  tightly  coupled  IT  and  busi¬ 
ness  strategies,  even  though  two-thirds  of  executives  indicated 
that  would  be  the  ideal. 

At  Zappos.  IT  chief  Brent  Cromley  says  that  he  and  others  in 
IT  "basically  think  of  ourselves  as  [working  in)  an  engineering 
shop.  We  have  built  almost  all  of  our  own  systems,  except  we 
have  an  SAP  financial  system.  ” 

As  for  the  main  business  platform,  "we  basically  have  an 
enterprise  data  warehouse  where  all  of  our  data  goes  —  Web 
site  traffic,  marketing  data,  merchandbing  analytics,"  Cromley 
explains.  Thb  b  the  system  that  handles  the  new  business  as 


For  example,  when  Zappos  expanded  into  selling  luggage,  it 
had  to  set  up  a  special  place  at  its  distribution  center  to  store  the 
new  items,  since  suitcases  are  much  bigger  than  shoes.  On  the 
systems  side,  the  company  needed  to  reconfigure  its  main  data 
warehouse  to  reflect  that  change. 

Vanguard’s  Heller  says  that  "everything  about  Vanguard  is  long¬ 
term,  and  we  think  of  business  technology  the  same  wa>'." 

For  example,  ever  since  the  company  launched  its  first  Web  site 
in  1995.  it  has  been  keenly  focused  on  Web  and  now  Web  2.0  tech¬ 
nologies,  says  Buckle)',  "because  even  back  then  it  was  very  clear 
to  us  that  thb  was  the  main  way  we  would  interact  with  Clients. 

We  took  a  big  bet  in  1995.  and  we  have  accelerated  investment  in 
it  ever  since."  Live  webcasts  and  chat,  internal  and  external  blogs, 
biometric  security  tools  and  the  first  finarKial  fund  application  for 
the  iPhone  are  just  a  few  examples  of  Vanguard's  IT  investments. 

"Everyone  knows  these  things  have  to  last  and  they  have  to 
scale."  says  Heller. 

The  business  results  are  in  the  numbers.  From  2001  to  2010, 
Vanguard  has  grown  from  $580  billion  in  assets  to  $1.4  trillion  — 
and  technology  has  been  a  major  driver  of  that  growth,  officials  say. 

Business  results  are  similarly  positive  at  other  conveigence 
pioneers.  Southwest  marked  its  37th  year  of  profitability  in 
2009.  Zappos  recorded  gross  merchandise  sales  of  more  than 
$1  billion  in  2009  and  was  purchased  hy  Amazon.com  Inc.  for 
$928  million.  P&G’s  earnings  per  share  were  up  17%  in  2009. 

Looking  ahead.  Progressive's  Voelker  says  business  and  IT  will 
increasingly  converge  —  even  at  companies  that  straggle  with 
alignment.  The  next  generation  of  employees  will  make  it  so. 

"Young  people  entering  the  workforce  understand  that  tech¬ 
nology  is  everywhere  and  involved  in  everything.  They  grew  up 
on  technology."  he  notes.  "When  I  talk  to  new  hires,  I  always  give 
a  canned  speech  about  how  IT  is  involved  in  every  aspect  of  the 
business.  The  speech  is  a  lot  shorter  now."  • 
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Manfaall.  “I  don’t  think  there  is  anything 
within  the  context  of  the  technology  organiza¬ 
tion  that  I  wouldn’t  feel  comfortable  sharing 
with  my  business  customers.” 

’This  is  essential  because  virtually  all  of  the 
products  Southwest  has  developed  and  imple¬ 
mented  have  been  enabled  by  technology.  ’The 
airline’s  Early  Bird  check-in  service  is  a  prime 
example.  For  an  extra  $io  each  way,  travel¬ 
ers  can  purchase  this  option  via  the  Web  site, 
which  automatically  checks  them  in  36  hours 
before  their  Silt’s  scheduled  departure  time, 
securing  them  an  earlier  boarding  position. 

(Other  passengers  can  check  in  electronically  a 
maximum  of  a4  hours  before  flight  time.)  Like 
most  everything  else  at  Southwest,  this  is  all 
done  online. 

Marshall  emphasizes  that  information  trans¬ 
parency  and  clear  communication  channels  are 
absolutely  critical  because  Southwest’s  “whole 
customer  thread  and  all  of  our  fundamental 
transactions  are  very,  very  tightly  integrated.  If 
you  make  a  change  with  the  airline  schedule, 
it  has  implications  for  bow  our  flight  crews  are 
scheduled  to  work,  how  our  airport  operations 
might  be  afiected  and  how  we  market  our  flight  schedule  on  our 
Web  site.  We  need  to  understand  all  of  the  implications  when  we 
make  business  or  process  change  decisions.” 

To  do  this  well  requires  team  players,  which  is  why  Southwest 
hires  IT  professkmals  based  on  attitude  flrst  and  then  on  techni¬ 
cal  and  business  skills.  What  constitutes  the  right  attitude,  Mar¬ 
shall  says,  is  a  passion  for  customer  service  and  open  conununi- 
cation.  These  are  absolutely  critical  in  the  airline’s  8so-person  IT 
group  “because  it  is  technology  that  is  our  product,"  she  says. 

Taking  the  Long  View 

Convergence  pioneers  do  not  develop  and  deploy  IT  as  a  solution 
to  a  particular  problem.  ’They  design,  build,  integrate  and  operate 
technology  for  the  long  term.  Essemially,  their  technology  strate¬ 
gies  boil  down  to  6nt  figuring  out  what  is  aixl  what  isn’t  going 
to  change  about  their  business,  and  then  automating  wbat  isn’t 
going  to  change,  like  firumcial  processes. 

’The  remaining  business  systems  are  built  in-house  as  part  of 
a  highly  flexible  computing  platform  that  can  adapt  to  market 
demand  for  new  products  and  services. 

’This  TT-business  convergeiKe  is  clearly  anything  but  the  norm, 
according  to  McKinsey  &  Co.’s  2009  survey  on  TT  strategy  and 
spending.  Of  the  444  IT  and  busihess  executives  who  responded, 
16%  said  they  have  put  in  place  tightly  coupled  IT  arid  busi¬ 
ness  strategies,  even  though  tvm-thirds  of  executives  indicated 
that  would  be  the  ideal. 

At  Zappos,  TT  chief  Brent  Cromley  says  that  he  and  others  in 
IT  “basically  think  of  ourselves  as  [wmking  in]  an  engineering 
shop.  We  have  built  almost  all  of  our  own  systems,  except  we 
have  an  SAP  financial  system.” 

As  for  the  main  business  platform,  “we  basically  have  an 
enterprise  data  warehouse  where  all  of  our  data  goes  —  Web 
site  traffic,  marketing  data,  merchandising  analytics,”  Cromley 
explains.  ’This  is  the  system  that  handles  the  new  business  as 


Zappos  expands  its  product  and  service  offerings. 

Fbt  example,  when  Zappos  expanded  into  selling  luggage,  it 
had  to  set  up  a  special  place  at  its  distribution  center  to  store  the 
new  hems,  since  suitcases  are  much  bigger  than  shoes.  On  the 
systems  side,  the  company  needed  to  reconfigure  its  main  dau 
warehouse  to  reflect  that  change. 

Vanguard’s  Heller  says  that  “everything  about  Vanguard  is  long¬ 
term,  and  we  think  of  business  technology  the  same  way.” 

For  example,  ever  since  the  company  launched  its  first  Web  site 
in  1995,  h  has  been  keenly  focused  on  Web  and  now  Web  2.0  tech¬ 
nologies,  says  Buckley,  “because  even  back  then  h  was  very  clear 
to  us  that  this  was  the  main  way  we  would  interact  with  clients. 

We  took  a  big  bet  in  1995,  and  we  have  accelerated  investment  in 

biometric  security  tools  and  the  first  financial  fund  iqtplicatioa  far 
the  iPhone  ate  ^  a  lew  examples  of  Vanguard’s  TT  investments. 

“Everyone  knows  these  things  have  to  last  and  they  have  to 
scale,”  says  Heller. 

’The  business  results  are  in  the  numbers.  From  2001  to  2010, 
Vanguardhasgrownffom$$8obilliooinassetsto$i.4trillioa  — 
and  technology  has  been  a  major  driver  of  that  growth,  oSSdals  say. 

Business  results  are  similarly  positive  at  other  convergence 
pkmeeis.  Southwest  marked  its  37th  year  of  profitability  in 
2009.  Zappos  recorded  gross  merchandise  s^  of  more  than 
$i  billion  in  2009  and  was  purchased  by  Amazon.com  Inc.  for 
$928  million.  PSd^'s  earnings  per  share  were  up  17%  in  2009. 

Looking  ahead.  Progressive’s  Voelker  says  business  and  TT  will 
increasing  converge  —  even  at  companies  that  struggle  with 

“Youi^  people  entering  the  workforce  understand  that  tech¬ 
nology  is  everywhere  and  involved  in  everything. ’They  grew  up 
on  technology,”  he  notes.  “When  I  ulk  to  new  hires,  1  always  give 
a  canned  speech  about  how  TT  is  involved  in  every  aspect  of  the 
business.  speech  is  a  lot  shorter  now.”  * 
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OPERATING  SYSTEMS 

Window^ 

Gets  the  /Green  Light 


AFTER  TAKING  A  PASS  ON  VISTA,  IT  SHOPS  ARE  READY  TO  COMMIT  TO 
MICROSOFT'S  NEW  PC  OPERATING  SYSTEM.  BY  ROBERT  L.  MITCHELL 

H  IMTIWIMSS^Mt»W«dwwVllt»-but  Windows? 
is  an  entirely  difeient  matter. 

H  Thomas,  QO  at  Pella  Cotp.,  says  his  IT  team  began 

H  beta-testing  Vista's  successor  a  year  ago  as  an  upgrade 
path  from  Windows  XP.  By  October,  just  two  months 
after  WiiKlows  7  launched,  the  Pella,  Iowa-based 
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window  and  door  manufacturer  had  22$  Windows  7  clients  up 
and  running  —  and  the  feedback  ftom  both  the  IT  staff  and  end 
users  has  been  generally  positive. 

I^lla  is  ready  to  move  forward.  Thomas  says.  “We  will  have 
$0%  of  our  users  —  that’s  2.500  machines  —  deployed  on 

WiiKlows  7  in  2010,”  he  says.  By  the  end  of  next  year  he  expects 

to  have  90%  of  his  users  on  the  new  (^)erating  system. 

This  time,  IT  oiganizatioas  say,  it  lodu  like  Microsoft  Coq).  has 
[lelivered  the  goods.  And  just  in  time.  About  80%  of  IT  OEganiza- 
tkxis  didn’t  adc^  Vista,  according  to  research  firm  Gartner  Inc. 

Instead,  the  vast 

_  majority  of  enterprise 

Windows  XP,  an  ei^- 
ancMialf-year-okl 
operating  system  that 
should  have  passed 
into  the  high-tech 


Survey  Shows 
Nuances  of  IT  Plans 
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LEAVING  XP  BEHIND 
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Computerworid 
surveyed  285  IT 

their  attitudes  and 


migrate  to  V^ndows 
with  yo%  saying  thal 
they  will  implement 


•  IT  director  at 

?  on"  from  aging  Windows  XP  I 
I  to  Windows  7. 


died  for  upgradii^; 
to  get  off  Windows 

XP.  That  said,  almost  40%  of  the  survey  respondents  reported 
that  they  will  continue  using  XP  until  Microsoft  stops  supporting 
it  —  in  April  2014  —  before  they  install  Windows  7  on  all  of  their 
Windows  machines. 

However,  those  willing  to  wait  that  long  are  in  the  minority. 
“We're  ready  to  move  on,"  says  Paul  Shane,  IT  director  at  the 
Philadelphia  office  of  Milliman  Inc.,  an  actuarial  consulting  firm 


of  his  150  desktops  and  laptops  on  Windows  7  by  the  end  of  this 
year.  Disappointed  with  Vista,  Shane  briefly  considered  moving 
to  Macs  and  the  OS  X  operating  system.  But  now,  he  says,  “we've 
cast  those  aside." 

Thomas  and  Shane  both  say  they  aren't  even  going  to  wait  for 
the  first  service  pack,  which  Gartner  analyst  Michad  Silver  says 
customers  can  expect  sometime  this  summer. 

whatrrwants 

For  IT.  Windows  7  is  an  opportunity  to  take  advantage  of  new 
features  and  better  integration.  Windows  Server  and  Miciosoft's 
System  Center  Configuration  Manager,  in  particular,  can  save 
money  by  requiring  fewer  pieces  of  management  software  and 
can  make  managing  deskt^  easier. 

Art  Sebastiano,  vice  presideiit  of  infrastructure  at  Modus- 
Link  Global  Sdutions  Inc.  in  Wahham,  Mass.,  has  been  testing 
Windows  7  on  a  few  dozen  machines  for  a  rollout  on  3,soo  PCs  in 
30  locations  around  the  world.  He  says  Windows  Server's  account 
credential  (password)  caching  capability,  which  facilitates  single 
sign-on  and  allows  access  to  networked  resouices  when  a  domain 
controller  is  unavailable,  works  better  with  Windows  7  clients. 


TOP  FIVE  FEATURES 


Midndimr  tamputenwtWs  survey  about  Windomis 
impteinentatian  plans  ran  online  from  Jan.  13  to  Feb.  10 
Research  assistance:  Mari  Keefe,  ediloriai  projea  manager 
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The  Procrastinators 

Some  IT  departments  are  waiting 
for  the  end  of  XP  support  to 
move  to  Windows  7.  For  others,  the 
obstacle  is  financiai. 

Not  EVlimMf  is  interested  in  upgrading  to 
Windows  7  -  at  least  not  r^  away,  ronyxear- 
iiert/'s  survey  respondents  who  said  they  have 
no  plans  to  upgrade  reported  that  they  just 
dont  anticipate  enough  benefit  particularly  in 
these  tough  economic  times,  to  warrant  the  cost  of  m^iration. 

For  Carl  Weddle,  director  of  IT  at  Quality  Trailer  Products  LLP. 
Windows  7  isn't  even  on  the  radar.  *we  were  clawing  our  way 
out  of  a  hole  unH  a  lew  months  ago.' he  says,  referring  to  the 
recession.  Even  in  better  times,  he  adds, 'I  tend  to  stay  on  the 
back  end  of  the  technology  curve  because  it's  cheaper  there." 
But  procrastinating  couhf  be  costly  in  the  long  nm.  Microsoft 
cairmierfixtnMipape 


“Driver  support  and  legacy  compatibility  have  been  good,” 
Sebastiano  says,  adding  that  Microsoft  oSers  a  downloadable  XP 
Mode  program  to  facilitate  backward  compatibility. 

Shane  says  group  policy  controls  are  improved  in  Windows  7. 
“We  really  love  the  new  client  group  policy.  You  can  manage  a  lot 
of  things  through  group  policy  now  that  used  to  require  a  log-in 
script,”  he  says. 

At  Univetsity  HeahhSystem  Consortium  in  Oakbrook,  Ill.,  a 
new  Windows  7  feature  called  DirectAccess,  which  allows  secure 
remote  access  without  a  separate  VPN  client  and  log-in,  is  a  big 
win.  Donald  Naglkh,  director  of  techrulogy  infrastructure,  says 
that  for  the  half  of  his  275  users  who  use  laptqis,  remote  access 
will  become  more  seamless.  “It’s  one  of  the  main  reasons  we 
want  to  [move  to]  Windows  7,"  he  says.  “It's  one  less  piece  of  soft¬ 
ware  we  have  to  worry  about  from  an  integration  starxipoint.”  He 
plans  to  start  migrating  to  Windows  7  early  nest  year  and  hopes 
to  have  all  systems  upgraded  by  the  end  cd  aoit. 

Pella  is  considering  deploying  DirectAccess  for  the  same 
reasons.  “Users  don't  like  having  to  remember  to  launch  a  VPN 
client  and  log  in,”  Thomas  says. 

Both  Pella  and  Milliman  see  BitLocker,  a  Windows  7  feature 
that  provides  full  volume  encryption,  as  a  solid  win  for  laptop 
users.  “We  used  a  third-party  product  that  didn’t  integrate  well 
with  Windows  and  had  a  separate  passwonl,”  says  Shane.  “Now 
we  can  secure  laptops,  and  the  encryption  and  security  is  trans¬ 
parent  to  the  user.” 

The  User  Interface 

IT  executives  say  Windows  7  boots  up  foster  than  Vista,  is  more 
stable  and  removes  the  intrusive  user  access  control  pop-ups.  But 
most  end  users  didn’t  have  Vista,  so  they  tend  to  compare  the 
Windows  7  user  interfoce  to  Windows  XFs. 

ModusLink's  Sebastiano  says  that  on  the  whole,  his  users  like 
the  interfoce,  particularly  features  like  drag-arul-drop  “snap"  re¬ 
sizing  of  windows  for  easy  side-by-side  comparisons,  and  taskbar 

But  Shane  says  bis  users  are  split  on  the  new  taskbar — 
"People  either  love  it  or  hate  it."  It’s  a  challenge,  he  says,  because 
he  has  users  who  can't  navigate  the  Start  menu  in  Windows  XP 
to  find  programs.  “If  it’s  not  a  shortcut  on  the  desktop,  they’re  in 
trouble,"  he  notes.  He  fears  that  another  change  to  the  tasl^r 
may  just  add  to  user  confusion. 

Users  also  don’t  always  understand  Windows  7  libraries,  a 
setup  that  rejdaces  the  standard  folder  metaphor  with  a  more 
sophisticated  model  that  allows  groupings  of  files  that  may  be 
stored  in  different  locations.  What’s  mote.  File  Explorer  d^ults 
to  the  local  library  —  even  if  you  don’t  want  users  pointed  there. 
Shane  says  that  even  administrators  may  find  it  annoying  at  first. 
"When  you're  rolling  out  a  bunch  of  PCs  on  a  network,  it  gets  in 
the  way,"  he  says. 

Shane  says  his  users  like  Windows  7’s  interfoce  improvements, 
such  as  those  SebastiatM  described,  and  more  subtle  changes, 

bigger  on  larger  screens  with  hitler  re^tiotL  That  has  helped 
users  with  poor  eyesi^”  he  says. 

Users  particularly  like  what  he  calls  the  “shake  and  bake" 
feature  mi  the  Aero  desktop  that  lets  the  user  minimize  all  open 
windows  on-screen  except  for.  the  currently  selected  one  by 
simply  grabbing  and  shaking  that  window  from  side  to  side. 
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Such  features  have  been  well  received,  “but  users  have  to  be 
told  about  them,”  he  says. 

Thomas  warns  that  a  migration  from  XP  to  Windows  7  will 
require  some  training.  “Users  haven’t  always  gotten  value  from 
the  tools  we  shove  their  way,"  he  says.  “This  time  we’re  spending 

more  time  upfront  trying  to  understand  vidiere  the  values  are  and 

actually  promoting  that." 


Remaining  Challenges 

Given  a  chmce  between  bringing  in  Windows  7  on  new  machines 

and  upgrading  old  ones,  most  organizations  prefer  the  forrrrer. 
Most  (58%)  of  the  survey  respondents,  however,  said  they  will 
also  upgrade  at  least  some  existing  machines. 

One  way  to  avoid  replacirtg  PCs  is  to  use  virtualization  tech¬ 
nologies.  Naglich  plans  to  do  exactly  that  at  University  Health- 
System  Consortium.  And  he’s  not  alone  in  considering  the  use 
of  desktop  virtiralization  to  ease  the  transition  to  Windows  7. 
Nearly  one  in  five  (18%)  of  IT  professionals  surveyed  said  they 
plan  to  move  at  least  some  Windows  XP  users  frcim  traditional 
Windows  PCs  to  hosted  virtual  desktops  as  they  migrate  to 
Windows  7. 

For  existing  hardware  that  meets  Windows  7  system  require¬ 
ments,  the  usual  upgrade  issues  apply.  "Fresh  installs  are  quick,” 
Sebastiano  says.  On  the  other  hand,  while  a  Vista  upgrade  to 
Windows  7  is  fairly  straightforward,  getting  user  profiles  and 
settings  mrwed  over  from  XP  is  more  challeiiging.  He’s  looking  at 
using  Laplink  Software  Inc.’s  PCmover  to  handle  that 

Application  compatibility  is  another  potential  challenge,  par¬ 
ticularly  for  dder  software.  That’s  something  Axhrm  Healthcare 
Pharmacy  Inc.  may  have  to  deal  with.  The  online  specialty  phar¬ 
macy  uses  several  internally  developed  Visual  Basic  6  applica¬ 
tions  that  won’t  run  on  Windows  7,  not  even  with  the  XP  Mode 
software.  “A  lot  of  ActiveX  controls  don’t  play  at  all,"  says  Norbert 
Cointepoix,  director  of  IT  at  Lake  Maty,  Fla.-based  Axhrm. 

But  Matt  Okuma  has  fixmd  that  some  applications  run  better. 
Okuma,  enterprise  architect  at  Best  Technology  Services,  a 
business  unit  of  Pacific  Coast  Building  Products  Inc.  in  Raircho 
Cordova,  Calif.,  says  his  Cisco  Unified  Communications  software 
never  worked  properly  on  about  too  of  the  Vista  machines 
he  tolled  out.  Some  of  those,  he  says,  had  to  be  rdled  back  to 
Windows  XP.  With  Windows  7,  however,  it  runs  just  fine.  “We 
love  it.  Everything  just  works,"  he  says. 

“The  fag^t  issue  is  making  sure  you  do  application  compat¬ 
ibility  testing,"  Pella’s  Thomas  says.  Pella’s  IT  staff  has  had  to 
update  softw^  releases  and  work  through  issues  on  some  of  the 
company’s  approximately  400  applications.  Pella  is  still  dcang 
compatibility  testing;  it  started  with  the  applications  used  by  the 

greatest  number  of  employees.  “Our  issue  has  been  on  oldet  a^ 

that  didn’t  necessarily  follow  current  development  guidelines," 

Thomas  says,  explaining  that  the  company  had  to  make  “small 

adjustments"  on  approximately  20%  of  its  applicaticms,  or  get 
updates  if  newer  releases  were  available. 

In  general,  he  says,  “we  haven't  had  too  many  applications  that 
we  haven’t  been  able  to  get  running." 

Overall,  after  living  with  XP  for  more  than  eigjit  years,  IT 

leaders  at  most  organizations  say  they  finally  feel  comfortable 
moving  on.  Shane  says  he  expects  the  transition  at  Milliman  to 

go  smoothly.  “It’s  not  sometl^  completely  new."  he  says.  “They 
just  made  a  better  Wista."  ♦ 


says  it  will  era)  support  for  Windows  XP  with  Service  Pack  3  on 
April  8. 2014.  (Organizations  st*  using  SP2  wdl  lose  support 
in  2012).  Companies  that  wait  too  long  -  or  whose  rnigration 
projects  get  too  far  behind  schedule  -  may  get  stuck  paying 
lor  custom  support  under  which  access  to  critical  security 
fixes  could  cost  more  than  $200X100  per  year. 

'  Microsoft  has  pushed  back  support  dates  before,  and  some 
organizations  are  staying  on  the  sidelines  to  see  if  that  happens 
agaiii  “We’H  wait  and  see  if  Microsoft  talks  about  extending 

that"  says  Norbert  (Jjintepoii.  director  of  IT  at  Axkim  Health¬ 
care  Pharmacy.  And  Sean  Seay,  corporate  dkeclor  of  infra- 
structure  at  Premier  Health  Partners,  isn’t  ki  a  rush  to  upgrade 
the  health  care  provider's  10.000-plus  Windows  XP  coniputers. 
■yye  hope  Microsoft  extends"  XP  support,  he  says. 

But  don’t  count  on  Microsoft  sliding  the  end-of-support  date 
this  time.  Gartner  analyst  Michael  Silver  says  the  company  may 


lay  end  of  support  companies  delay  plans  to  get  off  the  ok)  OS." 
he  says.  He  suggests  that  organizations  should  start  migrabng 
now.  nofing  that  XP  will  be  more  than  12  years  old  in  2014. 
Vince  Biddlecombe  had  another  reason  to  wait:  Office  2010, 

whichlaunchedear8erthismonth.Bi<)dlecotnbe.chieltech- 
nckogy  officer  at  kigistics  service  provider  Transplace  inc.  ki 

Frisco,  Texas,  says  he’ll  do  a  wholesale  replatement  of  about 

Office  2010  has  shipped  for  businesses.  "It  Sdn’i  seem  like  a 
good  idea  to  roll  out  a  whole  new  bunch  of  desktops  and  then 
turn  around  and  have  to  do  an  Office  2010  upgrade."  he  says. 

Waibng  for  Office  2010  before  deploying  Windows  7  may  kill 
two  birds  with  one  stone,  but  Silver  notes  that  it  will  also  make 
upgrading  more  complicated. 


GOVERNANCE 


r* 

m  there’s  a  relatively  new  approach  to  making  IT 

I  investment  and  operating  decisions  — and  then 

N  proving  their  value  to  shareholders  —  called  the 

IT  Capability  Maturity  Framework. 

The  IT-CMF  approach  fills  in  the  gaps  of  some 
better-known  IT  management  framework  schemes  such  as  Infor¬ 

mation  Technology  Infrastructure  Library  (ITIL)  and  Six  Sigma, 
according  to  IT  leaders  who  have  used  the  new  assessment  tool. 
IT-CMF  ranks  organizations  on  the  maturity  of  the  approach 

they  use  to  handle  36  IT  processes,  giving  them  scores  of  i  to  5 

in  each  area,  with  5  being  the  best.  The  processes  are  broadly 
divided  into  four  areas; 

■  Managing  ITlike  a  business  by  focusing  on  cirstoroets 

■  Managing  the  IT  budget  to  deliver  better  value  and 
'  performance. 

■  Managua  IT  capabilities  and  devekq^  core  competencies. 

■  Managing  IT  for  business  value  by  linking  IT  investments  to 


CIOs 

WELCOME 

new 

FRAMEWORK 


Vincenzo  Marchese,  group  enterprise  architect  at  oil  giant 
BP  PLC,  says  that  he  has  used  portiorrs  of  the  IT-CMF  assessment 
for  two  years  within  an  IT  grtrup  that  has  3,000  workers,  includ¬ 
ing  250  architects,  who  oversee  700  active  prefects. 

IT-CMF  is  "a  key  measure  to  track  how  we  do  over  time,  but  it 
is  one  measure,"  Marchese  says.  On  one  facet  of  IT  management 
called  enterprise  architecture  marragement,  BP  was  assessed  a 
Level  2  IT-CMF  rating  in  2008  and  rose  to  a  Level  3  in  2009  after 
making  some  changes,  he  says.  In  another  example,  when  morale 
in  BP'S  IT  unit  was  fairly  low  after  a  restructuring,  the  rr-CMF 
assessment  helped  identify  changes  —  such  as  adopting  new 
training  programs  and  well-defined  career  paths  —  that  helped 
bring  BP  up  to  a  Level  4  in  that  area,  Marchese  says. 

The  IT-CMF  system  was  developed  by  the  Innovation  Value 
Institute,  based  on  concepts  in  Mortagiiig  In/brmation  Technology 
for  Business  Value,  a  2004  book  by  Martin  Curley. 

rVI  was  co-fbunded  in  2006  by  Intel  Corp.,  Boston  Consult¬ 
ing  Group  and  the  National  University  of  Ireland.  Maynooth. 

The  university  uses  some  IT-CMF  concepts  in  IT  managenoent 
courses,  and  about  ts  other  universities  in  the  US.,  Europe  and 
Australia  are  following  suit 

Andrew  Agetbak,  a  princ^  at  Boston  Consukir^  Grtxq 
reviewed  120  hig^i-leveHT-C^  assessmerrts  perfircraed  on 
IT  groups,  of  which  more  than  20  were  detailed  assessment 
found  the  IT  maturity  level  “relatively  kw"  even  thou^  SOI 


This  little-known  IT  maturity 
model  provides  another  tool 
for  boosting  IT  effectiveness. 

BY  MATT  HAMBLEN 


parries  that  were  studied  had  irrvested  billions  of  doUars  in  r 

One  trend  Agetbak  noticed  is  that  IT  shops  show  "tren 
maturity  around  getting  technology  processes  approved" 
larger  orgarrization  but  are  “weak"  when  it  comes  to  tbeii 
to  track  and  describe  the  benefits  of  a  system  once  it’s  de[ 
“Benefits  tracking  is  weak,  with  no  established  processes, 
there  is  frequently  no  defined,  accountable  person  or  group  as¬ 
signed  to  track  berrefits,  he  says. 

John  Ellenberger,  director  of  research  at  SAP  AG.  says  the 
IT-CMF  assessment  could  help  IT  shops  struggling  with  changes 
in  techrrology,  inchrding  the  influx  of  smartphorres  that  workers 
buy  on  their  own  and  use  far  work-related  tasks  even  if  the  com¬ 
pany’s  IT  department  is  not  prepared  to  fully  support  them. 
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INFORMATION 

A^^URANCF 


PROTECT  VALUABLE  INFORMATION. 
IMPRESS  POTENTIAL  EMPLOYERS. 


maintaining  systems,  with  little  time  to  develop  new  ones,  he  says. 
Analog  Devices  makes  60,000  difieient  signal-processing  integrated 
circuits,  and  the  IT  suS  is  responsible  (or  the  systems  and  networks 
that  support  many  areas  of  that  work,  including  those  used  by  design 
engineers  wbo  develop  new  products. 

“With  a  new  CFO,  we're  really  driving  down  costs  hard,"  Forte  says. 
“With  80%  of  out  resources  focused  on  keeping  the  lights  on,  we're 
out  of  balance,  and  some  wonder  why  we  shouldn't  outsource  IT.” 

Facing  the  outsourcing  threat.  Forte  says  he  has  to  transform  his 
IT  group  from  one  that  has  depended  heavily  on  “the  knowledge  in 
people's  heads"  to  one  that  relies  on  defined  processes.  “We  really 
have  to  move  ourselves  from  people-managed  to  ptocess-ntanaged,” 
he  says.  “And  that  requires  a  framework  approach,  and  this  IT-CMF 
is  comprehensive  and  would  fit  the  bill."  • 

This  story  wrrs  reported  from  a  recent  Innovation  Value  Institute  conftrmce 
in  Boston;  many  of  the  user  continents  were  part  of  formal  presentations. 
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Joinnal 


Virtual  PCs  Need  Real  Security 


A  plan  for  a  company  wide  virtual  desktop  infrastructure 
demands  new  security  requirements. 


IF  MV  CIO  HAD  HIS  WAV,  he  wouM 
move  the  entire  company  to  a 
virtual  desktop  environment.  In 
his  mind,  it  would  be  a  cure-all  for 
the  costs  of  supporting  thousands 
of  PCs  and  the  headaches  caused  by  soft¬ 
ware  distribution,  security  patching  and 


move  in  either  directioo  between  the 
virtual  desktop  and  the  host  PC  or  any 
external  devices. 

Next  is  the  question  of  the  integrity 
of  the  host  PCs.  No  one  should  think 
that  VDI  will  free  us  bom  the  headaches 
associated  with  configuration  manage- 


Trouble 

Ticket 


my  “rule  of  least  privilege”  requirement 
so  that  we  don’t  expose  critical  applica¬ 
tions  and  data  to  unauthorized  people. 

Another  consideration  for  me  involves 
the  log-on  banners  that  users  must  read 
before  clicking  “accept”  and  logging  in. 
We  can't  lose  this  feature,  since  we  have 
a  legal  requirement  to  let  users  know 
about  their  responsibilities  and  our  prac¬ 
tice  of  monitoring  activity. 


More  Worries 

We  also  can’t  compromise  our  remote 
access  policy,  which  calls  for  two-factor 
authentication  and  the  use  of  a  VPN. 
This  is  necessary  because  I  can’t  vouch 
for  the  integrity  of,  say,  the  Internet 
kiosk  in  Moscow.  I  have  to  assume 


displayed  within  Windows. 

So,  how  does  that  aSect  security? 
That’s  what  I  pondered  as  I  set  up  my 
requirements,  and  my  conclusion  was 
that  our  security  posture  should  be  un¬ 
affected,  and  possibly  enhanced,  but  only 
if  VDI  is  prop^  implemented. 

My  first  and  most  imporunt  require¬ 
ment  is  that  dau  can’t  be  allowed  to 


And  speaking  di  centralized  configu¬ 
ration,  one  size  should  not  fit  all.  The 

employee  shouldn’t  be  the  same  as  the 

contractor,  partner,  supplier,  vendor  or 
other  affiliate.  I  don’t  want  to  require  a 
plethora  (rf  profiles,  but  some  hi^-level 
order  will  treed  tobe  in  place  to  satisfy 


the  relationship  between  each  user 
and  his  issued  VDI,  as  well  as  excep¬ 
tion  alerting  to  keep  us  infirrmed  about 
any  suspicious  activity  (such  as  a  user 
launching  an  excessive  number  of  VDI 
environments,  logging  in  from  a  location 
inconsistent  with  his  profile,  or  making 
multiple  access  attempts). 

Did  I  miss  anything?  Let  me  know.  ♦ 
This  week’s  journal  is  written  by  a  real  security 
maru^,  “Mathias  VlNinaan,'  whose  name 


and  employer  have  been  disguised  for  obvious 


UNO  one  should  think  that  VDI  will  free  us 
from  the  headaches  of  patch  distribution. 
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T  aking  Enterprise  ^  boomi- 

Application  Integration  into 

the  Cloud  BYBOBHOUL 


The  repuUtion  that  integration 
has  garnered  over  the  years 
as  an  ugly,  unwieldy  problem 
is  almost  entiiely  due  to  the 
way  integration  software  was  previously 
built  and  delivered  as  apposed  to  the 
actual  integration  projects  themselves. 
Fortunately,  the  SaaS  model  has  led  to  a 


I  functionality  into  one  product.  Customers  |  the  quality  ofareas  such  as  dau  visibility 


would  then  deploy  scores  of  these 
integration  stacks  in  order  to  meet  their 
business  requirements. 

The  impact  of  this  scenario  was  that 
not  only  was  the  necessary  runtime 
distributed  across  the  enterprise,  but 


and  control,  auditing  and  reporting,  and 
poUcy  standardization  and  enforcement. 
And  because  cloud  integration  platforms 
are  built  with  SaaS  technology  and 
concepts,  they  deliver  the  same  benefits 
as  SaaS  applications  themselves  including 
significantly  reduced  cost  structure. 


function.  Applications  cun  on  multiple 
systems  in  multiple  locations  using 
multiple  databases  and  files.  Therefore, 
integration  processes  also  need  to  be 
distributed  -  executing  in  any  number 
of  places  where  integration  of  systems  is 
required. 

In  the  traditional  model  of  developing 
software,  the  approach  was  to  build  a 
standalone  appUcation  (or  suite)  and 


The  SaaS  model  has  led  to  a 
fundamentally  different  way  of  thinking 
about  application  design  and  delivery. 

In  the  SaaS  model,  considerable  focus 
is  placed  on  designing  an  appUcation 
whereby  there  is  only  one  copy  but  that 


vastly  more  efficient  model  tor  deuvermg 
integration  is  made  possible  -  one  that 
greatly  simplifies  decades  old  challenges 
such  as  configuration  management  and 


Sponsored  by  Boomi,  Taking  Enterprise 
AppUcation  Integration  into  the  QouiT,  is 
available  in  its  entirety,  exclusively  at 


OPINION 


PAUL  GLEN 

Think  Politics  Aren't  Part 
Of  Your  Job?  Think  Again 


Managers 
hold  many 
misconcep¬ 
tions  about 
the  role 
of  politics 
in  the 
corporation. 


PaulGlMiisa 

consultant  who  helps 
technical  orpnizations 
improve  productivity 
through  leadership, 
and  the  author  of  the 
award-winning  book 
Leading  Geeks  (Jossey- 
Bass.  2003).  you  can 
contact  him  at  infos 
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IN  THE  COURSE  of  consulting  for  and  coaching  IT  managers,  the  com¬ 
plaints  I  hear  most  often  involve  politics.  “I’d  love  my  job  if  it  weren’t 
for  the  politics.”  “This  would  be  a  great  place  to  work  if  not  for  the  pol¬ 
itics.”  “Politics  aren’t  my  job.  Why  do  I  spend  so  much  time  on  them?” 


These  frustratioiis  are  usually  expressed  with 
an  underlying  sadness  or  even  anger.  The  persis¬ 
tent  presence  and  gritty  reaUty  of  politics  come  as 
a  surprise  and  a  disappointment  to  most  technical 
manageis. 

1  think  this  is  so  because  many  managers  hold 
the  following  deep-seated  misconceptions  about 
the  role  politics  in  the  corporation; 

Politics  sliouldat  be  necessary.  Many  manag¬ 
ers  figure  that  if  everyone  is  focused  on  the  best 
interests  of  the  business,  there  should  be  no  need 
to  argue  so  much  over  priorities  and  turf. 

Politics  represent  a  failure.  If  you  believe  that 
pditics  are  unnecessary,  then  you  are  also  likely 
to  believe  that  creating  alliances  and  undermin¬ 
ing  other  people  or  ideas  is  the  result  of  a  moral 
fiiiling.  If  a  manager  holds  such  a  viewpoint,  then 
politics  will  always  seem  to  be  driven  primarily 
by  negative  forces,  including  misperception,  mis- 
conununication,  self-centeredness,  greed,  pride, 
ambition  and  neurosis. 

Pfayiuf  at  politics  is  not  In  my  Job  description. 

Most  IT  managers  rise  through  the  technical 
tanks.  The  virtues  they  aspire  to  involve  buildup 
and  maintaining  quality  systems  and  providing 
quality  technical  services.  So  it's  natural  that 
technical  managers  come  to  the  job  assuming  that 
their  most  important  responsibility  is  to  oversee 
the  creation  and  support  of  technology.  They 
view  politics,  at  best,  as  a  distraction  tern  their 
primary  mission  and  an  obstacle  to  progress. 

But  the  reality  is  that  politics  will  never  be  ex¬ 
punged  frmn  professional  life,  and  that  is  mainly 
because  they  play  a  very  positive  role.  Those  three 


misconceptions  should  be  stood  on  their  head: 

Politics  art  a  Rfctisary  part  Of  thu  pnwMoa 
orttchnkal  services.  The  notion  of  politics  as  a 
diversion  rests  on  a  misunderstanding  of  what 
politics  ate  about  in  the  first  place.  Politics  are  not 
the  seamy  underbelly  of  management.  They  are 
the  way  groups  make  decisions  about  priorities, 
processes  artd  resource  allocation.  If  managers 
want  their  building  atrd  maintenance  plans  to  be 
considered  important  enough  for  the  organization 
to  invest  the  required  money  and  attention,  they 
need  to  engage  in  the  poUtical  process. 

ppmks  arc  a  form  of  copptiidiop.  Since 
organizations  need  to  make  collective  decisions, 
politics  do  not  represent  a  failure  but  a  necessary 
function.  It's  true  that  sometimes  the  animating 
fiwees  driving  a  particular  issue  or  person  may  be 
unsavory.  Arxl  the  culture  in  which  politics  are 
carried  out  may  not  be  healthy  or  fiinctional.  But 
the  prditics  themselves  are  a  separate  matter. 

Politics  foaMy  arc  a  bif  part  Of  ymirjob. 
Political  astuteness  is  one  of  the  most  important 
tools  you  have  for  creating  an  environment  in 
which  people  can  develop  and  mainuin  great 
technology.  You  need  to  acquire  the  resources, 
attention  and  prestige  necessary  to  deliver  value 
to  the  organization.  As  managers  move  itp  the 
ladder,  overseeing  the  actual  provisirm  becomes  a 
smaller  and  smaller  porticHi  of  the  job,  and  politics 
become  a  bigger  and  bigger  one. 

To  rage  against  immutable  truths  is  to  court 
disappointment.  Being  successful  as  a  technical 
manager  requires  reconceptualizir^  politics  and 
reconciling  yourself  to  their  role  in  the  job.  • 
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MARKETPLACE 


The  new  Intel*  Xeon*  processor  5600 
series  Increases  performance,  cuts 
operating  costs,  and  heips  deliver  ROI. 
That's  inteiligent  performance!  Check 
out  the  new  inteiligent  features  of  the 
Xeon  5600  at  intei.com/itcenter. 


Performance: 

Your  processor  gets  the  job  done. 

Intelligent  performance; 

Your  processor  gets  the  job  done 
with  40%  more  performance  by 
adapting  to  your  workload.^ 
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pick  the  topics, 
pick  the  sources, 
pick  the  frequency. 


RelayGoose  II 

Climate  Monitor 
Relay  Control 

*599 


Alerts  with  Escalations 

E-mail  &  SNMP  Trops 


SHARKS' NK 

TRUE  TALES  OF  IT  LIFE  AS  TOLD  TO  SHARKY  : 


Efficiency 


Sometimes  the  Problem  Is  Clear 

IT  pilot  fish  at  a  law  firm  gets  a  call  from  a  user  who's  on  the  road  -  and  spii 
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This  hacker 
was  hapless. 
Will  you 
he  lucky 
enough  to 
get  one 
like  him? 


Frank  Hayes 

has  been  covering 
the  intersection 
of  business  and  IT 
for  three  decades. 
Contact  him  at 
cw9frankhayes.com. 
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^OPINION 

FRANK  HAYES 


The  Hackery  the  Con  Man, 
The  ATM -and  You 


Last  month,  the  FBI  arrested  a  19-year-old  grocery  store  employee 
for  trying  to  steal  hundreds  of  thousands  of  dollars  from  ATMs. 

He  planned  to  use  default  passwords  he  found  onhne  to  reprogram 
the  ATMs,  convincing  them  they  held  $1  bills  instead  of  $20  bills. 
Moral  of  the  story:  Change  your  default  passwords. 


Wait  —  did  that  advice  come  a  little  too  soon? 
After  all,  there's  a  lot  mote  to  the  story  of  Thor 
Alexander  Morris,  according  to  the  affidavit  from 
the  FBI  agent  who  led  the  investigation. 

It  seems  Morris  got  the  idea  frran  a  Youlhhe 
video  that  showed  how  to  hack  a  widely  deployed 
ATM  made  hy  Tranax  Technologies.  And  tte 
manual  for  those  machines  was  available  online, 
laying  out  all  the  information  for  adjusting  an 
ATM  so  it  gives  out  more  money  than  it  should  — 
inchidii^  the  default  maintenance  passwords. 

An  ATM  programmed  to  give  out  $i  bills  when 
it  actually  held  twenties  would  respond  to  a 
request  for  $500  by  counting  out  500  $20  bills,  or 
$10,000.  At  that  rate,  hitting  just  30  ATMs  would 
net  $300,000.  At  least,  that  was  Morris'  plan. 

Moral  Of  tht  Story:  No  kidding,  dini^  those 
dt^ult  passwords. 

So  Morris  flew  to  Texas,  after  making  contact 
online  with  a  Houston  con  man  who  said  he  could 
find  dozens  of  Tranax  ATMs.  Morris  bought  a 
prepaid  debit  card,  just  as  he'd  seen  online.  He 
found  an  unsecured  Wi-Fi  signal  and  activated  the 
card  using  the  name  “Barack  Obama,"  then  asked  a 
friend  of  the  con  man  to  drive  him  to  a  flea  market 
that  had  the  right  kind  of  ATM,  where  Morris  put 
on  a  wig  and  fake  beard  and  set  to  his  task. 

Unfiirtunately  for  Morris,  the  con  man  was 
feeding  information  to  the  FBI.  The  “friend"  was 
an  undercover  agent.  And  the  ATM  was  under 
surveillance.  Oops. 

Moral  of  the  story:  Really,  change  those  default 


passwords.  And  prt^you  get  an  attacker  this  hapless. 

Maybe  you're  thinking  another  moral  should 
be:  Curse  the  Internet  for  making  it  easy  for  crooks  to 
find  thir^  like  de/iiult  passwords. 

But  the  Internet  made  it  much  easier  for  the 
FBI,  too.  The  law  enforcement  agency  had  clear 
photos  of  Morris,  straight  from  his  Facebook  page. 
And  his  e-mails  and  instant  messages  to  the  con 
man  let  investigators  know  pretty  much  every¬ 
thing  he  planned  to  do. 

Ob,  yeah  —  and  the  con  man  let  FBI  agents  use 
his  online  identity  to  contact  Morris  directly.  On 
the  Internet,  nobody  knows  you're  a  fed. 

(Besides,  your  help  desk  probably  saves  itself  a 
lot  of  work  by  pulling  manuals  from  the  Internet 
instead  of  searching  among  shelves,  boxes  and 
piles  of  documentation.  Of  course  manuals  ate  on 
the  Internet  —  along  with  tips,  how-to's  and  ditty 
tricks.  That's  what  the  Internet  is  for.) 

As  it  turned  out.  Morris' scheme  was  probably 
doomed  fiom  the  start.  That  YouTlibe  vi^  was 
based  on  an  ATM  heist  that  took  place  in  Virginia  in 
20o6.Aflerthat,Tranaxpatcheditssoftwaresoin- 
stallers  had  to  change  the  default  passwords  before 
ATMs  went  into  service.  Morris  never  bad  a  chance. 

Make  sure  the  would-be  thief  who  goes  after 
your  systems  doesn't  do  any  better. 

Moral  of  tht  ftory:  Honest,  you  should  cliattge 
your  default  passwords.  And  iqiplyyour  vendors' 
security  patches.  And  when  in  doubt,  cull  the  FBI. 

And  never,  ever  get  your  security  advice /mm 
Youlitbe.* 


SAS  Business  Analytics  Software 

Data  Management  I  Analytics  I  Reporting  I  Targeted  Business  and  Industry  Solutions 


What  if  you  could  increase  revenue  by  66% 
using  your  data  to  make  confident,  fact-based  decisions? 


You  can.  SAS  gives  you  The  Power  to  Know.* 


SAS  Business  Analytics  software  helps  organizations  across  every  industry 
discover  innovative  ways  to  increase  profits,  reduce  risk,  predict  trends, 
and  turn  information  assets  into  true  competitive  advantage. 


www.sas.com/flecisions 

for  a  free  research  paper 
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Scalability  is  in. 
Cost  sav;.i^^  in 
Efficiency  is  in. 
Siemens  is  in. 


Microsoft's  cloud  services  are  helping  some  of^ 
the  world's  leading  companies  succeed.  We're 
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Snap  this  tag  to  get  the  latest  news 
on  Microsoft's  cloud  services. 

Get  the  free  app  for  your  phone  at 

http://gettag.mobi 
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